LOCAL TORSION ON ELLIPTIC CURVES AND THE 
DEFORMATION THEORY OF GALOIS REPRESENTATIONS 



CHANTAL DAVID AND TOM WESTON 



1. Introduction 



Let E be an elliptic curve over Q. Our primary goal in this paper is to investigate 
for how many primes p the elliptic curve E possesses a p-adic point of order p. 
Simple heuristics suggest the following conjecture. 

Conjecture 1.1. Assume that E does not have complex multiplication. Fix d > 1. 
Then there are finitely many primes p such that there exists an extension Kj Q p of 
degree at most d with E(K)[p] ^ 0. 

We expect this conjecture to be false (for sufficiently large d) when E does have 
complex multiplication. Nevertheless, our main result is that Conjecture 11.11 at 
least holds on average. For A, B > 0, let Sa,b denote the set of elliptic curves with 
Weierstrass equations y 2 — x 3 + ax + b with a, b € Z, \a\ < A and \b\ < B. For an 
elliptic curve E and x > 0, let ir%{x) denote the number of primes p < x such that 
E possesses a point of order p over an extension of Q p of degree at most d. 

Theorem 1.2. Fix d > 1. Assume A,B > x^ +£ for some e > 0. Then 



Our proof is essentially a precise version of the heuristic alluded to above. We 
explain this heuristic for d = 1; in this case we say that a prime p is a local torsion 
prime for E if -E(Q p )[p] 7^ 0. One sees easily that for a local torsion prime p > 7 
of good reduction for E one must have a p (E) — 1. By the Riemann hypothesis, 
a p (E) lies in an interval of length approximately so that naively one expects 
a p (E) — 1 to occur with a probability of A comparison of the reduction exact 
sequence with an analysis of extension classes suggests that when a p (E) = 1, p is a 
local torsion prime with probability -. Combining these estimates, one expects 



local torsion primes for E, hence the conjecture. 

We especially like this heuristic as each of the two parts sometimes fail. Specif- 
ically, for some elliptic curves one has a p (E) — 1 for only finitely many primes; in 
these cases, the conjecture (for d = 1) follows immediately. Furthermore, for CM 
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elliptic curves one finds that a p (E) — 1 in fact forces p to be a local torsion prime; 
this explains the CM exception in the conjecture. 

Although we believe that Conjecture 11.11 is of fundamental and independent 
interest in the arithmetic of elliptic curves, our motivation for its study originated 
in questions in the deformation theory of Galois representations. For any prime p 
let 

p E , p : Gal(Q SuM /Q) -> GL 2 (F P ) 

be the Galois representation on the p-torsion points of E\ here Qsu{p} is the maxi- 
mal extension of Q unramified away from p and the set S of places of bad reduction 
for E. When p~E,p is absolutely irreducible, one can associate to Pe,p its universal 
deformation ring R E n p V i parameterizing all lifts of Pe,p to artinian local rings with 
residue field F p . Mazur [10] asked if the deformation theory of pE,p is unobstructed 
(so that R E nl p v is non-canonically isomorphic to a power series ring in three variables 
over Z p ) for all but finitely many primes p. Using work of Flach [4], he showed 
that this is the case so long as one excludes those primes p such that E possesses 
a point of order p over a quadratic extension of Q p . Theorem 11.21 with d = 2 thus 
guarantees that this last condition holds, on average, for only finitely many primes 
V- 

Unfortunately, we can not state a deformation theoretic analogue of Theorem ll.2[ 
as the other reasons for obstructions do not satisfy as strong of a bound. Neverthe- 
less, we do show that Mazur's question has an affirmative answer for elliptic curves 
admitting rational 2-isogenies (which is basically trivial) or 15-isogenies (which is 
an amusing computation). 

For another application, recall that the newform Je '■= *Yl<a n (E)q n associated 
to E is said to possess a companion form modulo p if there is a mod p eigenform 
g = J2 bn<l n 01 weight p—1 satisfying 

n 2 b n = na n (mod p) 

for all n > 1. For d > 1, let t^e( x ) denote the number of primes p < x such that 
ctp(E) equals ±1 and possesses a companion form modulo p. Using a deep result 
of Gross [5], Theorem 11.21 yields the following. 

Theorem 1.3. Assume A, B > ii +£ for some e > 0. Then 



Ees A ,B 

It would be interesting to remove the assumption that a p (E) — ±1 above, al- 
though it is not immediately clear to the authors how to adapt these methods to 
that question. 

We present some data and simple results on Conjecture 11.11 in the case d = 1 in 
Section [21 In Section [31 we show that over the unramified extension of Q p of degree 
d, residual p-torsion points lift to p-adic p-torsion points with a frequency of —g . In 
Section[4]we use this result and analytic methods to deduce Theorem ll.2l Finally, in 
Section [S]we discuss the applications to deformation theory and companion forms. 
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2. Local torsion primes 

Fix an elliptic curve E over Q. We call a prime p a local torsion prime for E if 
E possesses a point of order p over Q p . For x > let tte(x) denote the number of 
local torsion primes p < x for E. Using the Magma Computational Algebra System 
we computed 7Te(10 6 ) for the 5113 elliptic curves E with conductor at most 1000. 
(Note that 7rg is not isogeny-invariant, so that these computations were done over 
isomorphism classes rather than isogeny classes.) 







ffE such that ^(lO 6 ) = 




Curves 


ff curves 


1 2 3 4 


5+ 


All curves 


5113 


568 3687 828 15 1 


14 


Curves with no torsion 


1364 


484 733 117 15 1 


14 



The 14 curves E with 7Te(10 6 ) > 5 were all CM curves and had between 22 
and 36 local torsion primes in this range. (In fact, they all had CM by Q(V~ 3), 
although this presumably is an artifact of the small conductors we considered.) 
Thus only one elliptic curve without complex multiplication and conductor at most 
1000 had as many as four local torsion primes less than one million: the elliptic 
curve 774D1, for which 2,3,5,7 are local torsion primes. 

We remark that the precise ratios reported here should not be taken too seriously, 
as elliptic curves of small conductor are not at all representative of all elliptic curves. 
Nevertheless, this data certainly supports Coniecture ll.il Indeed, large local torsion 
primes p were quite rare: 99.1% of the local torsion primes occurring were 2, 3, 5, 7. 
The only two elliptic curves in this sample with local torsion primes > 1000 were 
131A1 (with local torsion primes 59 and 4723) and 775A1 (with local torsion prime 
26993). 

We now record some simple results on local torsion primes. Although some of 
the proofs rely on results in the next section, we find it most convenient to state 
them here. 

Proposition 2.1. Let E be an elliptic curve over Q. 

(1) If .E(Q)tors 7^ 0, then E has finitely many local torsion primes. (More 
precisely, if E(Q)t OIS ^ 0, then any prime p > 7 of good reduction for E is 
not a local torsion prime for E unless S(Q) tors = Z/p.j 

(2) For any finite set of primes V , there exists an elliptic curve E such that 
each element of V is a local torsion prime for E. 

(3) // E has complex multiplication, then a prime p > 3 of good reduction is a 
local torsion prime for E if and only if a p {E) = 1. 

Proof. 

(1) Suppose that p > 7 is a local torsion prime of E at which E has good 
reduction. Since p > 3, the formal group of E over Z p is torsion-free, so 
that the natural map 

-E-(Qp)tors — > E(F P ) 

is injective. In particular, p divides #E(F p ); since p > 7, it now fol- 
lows from the Riemann hypothesis that E(F p ) must have exactly p ele- 
ments. Since -E(Q)tors is non-trivial and injects into E(F p ), we conclude 
that -E(Q)tors — Z/p, as desired. 
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(2) For each p £ V, fix a p ,b p £ F p so that the elliptic curve E ap ,b p with 
Weierstrass equation y 2 = x 3 + a p x+b p has precisely p points over F p . (The 
existence of such a curve is guaranteed by Deuring's Theorem which gives 
an exact formula for the number of elliptic curves over F p with p + 1 — r 
points for \r\ < 2^/p; see for example [8] for a statement of Deuring's 
Theorem.) Let (A p ,B p ) £ Z/p 2 x Z/p 2 be one of the pairs lifting (a p ,b p ) 
in Corollary 1331 Let A, B £ Z be such that A = A p (mod p 2 ), B = B p 
(mod p 2 ) for all p £ V. Then by Corollary 13.51 each p £ V is a local torsion 
prime for Ea.b- 

(3) This is clear from Lemma 13.21 as a CM elliptic curve is a canonical lift 
of each of its reductions. Alternately, it follows from the fact that for an 
ordinary prime p the mod p Galois representation of a CM elliptic curve is 
abelian when restricted to a decomposition group at p. 

□ 



3. Local torsion on elliptic curves 

Fix a prime p > 3 and a finite extension k of F p of degree d. Let W denote the 
ring of Witt vectors over k; we write K for the field of fractions of W. Note that 
k = W/pW; we set W 2 = W/p 2 W. 

Let E be an elliptic curve over W; that is, E is an elliptic curve over K with 
good reduction. The next lemma gives a criterion for E to possess a X-rational 
point of order p. For a finite abelian group M we write rank p M for the p-rank 
of M (that is, for the F p -dimension of M (g>z F p or equivalently of the p-torsion 
subgroup M[p\). 



Lemma 3.1. Let E be an elliptic curve over W . Then 
vsmk p E(W 2 ) -- 




tfE(K)[p}=0; 
ifE(K)\p}^0. 

Proof. Consider the diagram (with exact rows) 

► E (pW) ► E(K) ► E(k) ► 



► E (pW/p 2 ) ► E(W 2 ) ► E(k) ► 

with Eq the formal group of E over Ok- Since W is unramificd over Z p , it follows 
from [TTJ Theorem IV. 6. 4b] that the reduction map Eq(pW) — > Eo(pW/p 2 ) can be 
identified with the natural map — > (Z/p) d . In particular, taking p-torsion and 
applying the snake lemma we obtain a commutative diagram 

► > E{K)[p] >■ E{k)\p] ► (Z/p) d 



> (Z/p) d > E(W 2 )[ P } »■ E(k)[p] > (Z/p)° 

It follows that 

rankp E(W 2 ) = d + rank p E(K)\p\. 
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Since the field K(E[p\) contains K(n P ) and thus is ramified over Q p , E(K)[p] it at 
most one-dimensional and the lemma follows. □ 

We fix now an elliptic curve E over k such that E(k)[p] 7^ 0. We first determine 
how many lifts of E to W% have p-rank d + 1. 

Lemma 3.2. Let E be an elliptic curve over k such that E{k) has a non-trivial 
p-torsion point. Then precisely one of the p d isomorphism classes of lifts of E to 
an elliptic curve E over Wi satisfies rank p E(Wi) = d + 1. 

Proof. Since E is necessarily ordinary, there is a canonical exact sequence of finite 
flat group schemes 

0^ fi p ^ E[p}^Z/p^0 

over k. In fact, since E{k) has a point of order p, it follows that this exact sequence 
exists already over k and is split; that is, E[p] = /i p x Z/p as fc-group schemes. 

By the Serre-Tate theorem (see [5J Theorem 1.2.1], for example), the lifts of E 
to elliptic curves over Wi are parameterized by the lifts of the p-divisible group 
E[p°°) to a p-divisible group over Wi. Any such lift is an extension of Q p /Z p by 
flpoc , so that these lifts correspond to elements of 

limExt^Z/p™,^) 

n 

where the extensions are computed in the category of finite flat group schemes over 
Wi. It is equivalent to compute these extensions under the flat topology, so that 

Ext^Z/p", /v.) = fl^Spec W 2 , /vO = Wf /Wf n Sp.ff 2 S (Z/p) d . 

Therefore the natural map 

(1) limExt^Z/p",^) -> Ext x (Z/p,//p) 

n 

is an isomorphism, and these groups have order p d . In particular, this proves that 
E has precisely p d isomorphism classes of lifts to W2 ■ 

Let E be a lift of E to Wi ■ One sees immediately from the proof of Lemma 13.11 
that E{W-i) has p-rank d+ 1 if and only if the canonical exact sequence 

o-> M p->^W -> z/p^o 

splits. By |T]), this occurs for precisely one lift E, as claimed. (This lift is usually 
called the canonical lift of E to W2.) □ 

Remark 3.3. We note that it follows from the above proof that the isomorphism 
class of an elliptic curve over W2 is determined by its j-invariant and the isomor- 
phism class of its reduction to k. This fact can certainly be proven in for more 
elementary ways. 

For a, b elements of some ring R, we write E a ^ for the projective plane curve with 
affine Weierstrass equation y 2 = x 3 + ax + b. The next lemma applies Lemma 13.21 
to obtain a lifting result for these cubics. 

Proposition 3.4. Let E a j, be an elliptic curve over k such that j(E a j,) ^ 0, 1728. 
Assume that E a ,b{k) has an element of order p. Then there are exactly p d distinct 
pairs (Ai, Bi) € Wi X Wi such that (Ai, E>i) = (a,b) mod p and 

ieaik p E AiyBz (W 2 ) =d+l. 
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Proof. Consider the closed subscheme S of A^ 2 (with coordinates j,A,B) defined 
by the j-invariant equation 

A 3 

3 = 6912 ' 4A3 + 27B 2 ' 

The surface Sxw 2 k is smooth away from j = 0, 1728, so that it follows from Hensel's 
lemma that for each of the p d lifts j of j(E a ^) to W2, there are precisely p d lifts of 
(a, 6) to W2 x W2 such that the corresponding elliptic curve over W2 has j-invariant 
j. In particular, each of the p d possible j-invariants lifting j(E) to W2 occurs for 
some Ea,b with (A,B) E W2 X W2. Since by Lemma [3.21 there are precisely p d 
isomorphism classes of lifts of E a ^ to W2, it follows that the isomorphism class 
of a lift of E is determined by its j-invariant. (Alternately, since the twists of an 
elliptic curve E over a ring R are parameterized by _ffg(Spec R, Aut E) and one has 
p \ # Aut _E a .b since p > 5, one can deduce this from the fact that the categories of 
etale sheaves on Spec k and Spec W are equivalent.) In particular, each isomorphism 
class occurs for precisely p d values of A, B. By Lemma [3.21 precisely one of these 
isomorphism classes has p-rank d + 1, which yields the proposition. □ 

For our analytic arguments we will be interested only in elliptic curves over Z p . 
In this case Proposition 13.41 yields the following. 



Corollary 3.5. Let E a ^ be an ordinary elliptic curve over F p such that j(E a ,b) ^ 
0, 1728. Let k be an extension of F p of degree d such that E(k)\p] 7^ 0; set W2 = 
W/p 2 with W the ring of Witt vectors ofk. Then there are exactly p distinct pairs 
(Ai,Bi) G Z/p 2 x Z/p 2 such that (Ai,Bi) = (a,b) mod p and 

rankp E AitBi (W 2 ) =d+l. 

Proof. The canonical lift of E a fi to W% has j-invariant in Z/p 2 . Thus by Hensel's 
lemma as before there are precisely p pairs lying in Z/p 2 x Z/p 2 among the p d pairs 
of Proposition [331 The corollary follows. □ 

4. Analytic arguments 

Fix d > 1 and as before let W2 denote the Witt vectors of length two over a 
finite field k of order p d . 

Definition 4.1. We write v p {d) for the number of pairs (a, b) £ Z/p 2 x Z/p 2 such 
that E a j, is an elliptic curve with rank p E a fi(W 2 ) = d + 1. 

The following estimates will be used in our main result. 

Lemma 4.2. We have 

Vd(p) < dx 7/2 logx; 
Vd{p) 



J2^«dx*/ 2 \o g : 



P 



p<x 
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Proof. Write Vd{p) — v'JkP) + v d(p) + ^<j 728 (p) wriere v 'dkP) ( res P- v \kp)i resp. 
v d (p)) denotes the number of pairs (a, b) £ Z/p 2 x Z/p 2 such that E a .b(W 2 ) 
has p-rank d+ 1 and does not have j-invariant or 1728 (resp. has j-invariant 
0, resp. has j-invariant 1728). It suffices to prove the lemma separately for each of 
these three functions. 

We begin with v' d {p). Since an elliptic curve E over F p has a point of order p 
over F p d if and only if a p {E) d = 1 mod p (see Lemma [4731 below) . by Corollary 13. 51 
we have 

»4(p) = P- #{M) G F p x x F* ; a p (£ M ) d = 1 mod p] 
= p- Y, (p-l)H(r 2 -4p) 

\r\<2^p 
r d = l mod p 



by Deuring's theorem; see for example [5]. (Note that restricting to (a, 6) € F* x F* 
has eliminated those elliptic curves with j-invariant or 1728.) The class number 
formula together with the trivial bound L(1,xd) <C logD yields H(r 2 — Ap) <C 
y^log 2 ^. As (for large enough p) there are at most d such r, it follows that 

v' d (p) < dp 5 / 2 log 2 p. 

The asserted bounds for v' d (p) all follow easily from this. 

Consider now v^(p)- An elliptic curve E over Z/p 2 with j-invariant is always 
the canonical lift of its reduction, so that by the proof of Lemma 13.21 it has p-rank 
d + 1 over W precisely when 

Op( E x z/p 2 F p) d = 1 ( mod p). 

(Note that in this case Corollary 13.51 does not apply.) Since a curve E a ^ over F p 
has j-invariant if and only if b = and each such curve over F p has p 2 lifts to 
Z/p 2 , we obtain 

"2(p) = p 2 • E #{ fl e f p ; a p( £ ».o) = r >- 

kl<2VP 

r d =l mod p 

Thus 

E E E Xb„.o(p) 

P<.t |r|<2 x /p aeF * 
r =1 mod p 

where Xe(p) ^ s 1 ^ a p{E) — r and otherwise. Reversing the order of summation, 
we obtain 

Ef = EE E xk» 

p<x a<g; a<p<x \r \ <2^/p 

r d = l mod p 

< d • max ^ #{p < a: ; a p (E afi ) = r} 

\a<x 



E 

p<.x 
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An elementary argument using the description of a p {E a ,o) in terms of the quadratic 
form X 2 + Y 2 shows that 



so that we obtain 



#{p<x-a p {E afi )^r} < 



P 2 <<d -^' 

p<x a<SE 



E 



« dx 3 ' 2 . 

Applying partial summation one now easily obtains 



p<x y 



< d 



which suffice for the lemma. An entirely similar argument gives the same bounds 
for^ 728 . □ 

The next lemma was used in the preceding proof. There are of course many 
proofs; we give one in the spirit of Section 3. Alternately, one could use the Weil 
conjectures and look at the p-divisibility of #£'(F p d) = p d + 1 — (a p + (3 p ), where 
a p , P p are the roots of the characteristic polynomial x 2 — a p (E)x +p over F p . 

Lemma 4.3. Let E be an elliptic curve over F p . Then E(F p d)[p] ^ if and only 
if a p (E) d = 1 mod p. 

Proof. If a p (E) — 0, then E is supersingular and never has p-torsion over any 
extension of F p , so we may assume that a p (E) 7^ 0. In this case, the p-torsion of 
E decomposes as 

E[ P ] = ZMx)e/ip(x _1 ) 

where \ is the character of Gal(F p /F p ) sending a Frobenius to a p (E). (See [5], for 
example.) Now E(F p d)[p] ^ if and only if \ is trivial on Gal(F p /F p d); since this 
Galois group is generated by the d th power of Frobenius, the lemma follows. □ 

Recall that for an elliptic curve E, tte(x) denotes the number of primes p < x 
such that E possesses a point of order p over an extension of Q p of degree at most 
d. Let 7r^; ur (a;) denote the number of primes p < x such that E possesses a point 
of order p over an unramified extension of Q p of degree at most d. 

Lemma 4.4. Let E be an elliptic curve. Then 

d l \ <i,ur / \ 

■K E {X) - TTz (X) 

is bounded by the number of primes p < d. 

Proof. Fix a prime p > d and a ramified extension K/Q p of degree at most d. To 
prove the lemma it suffices to show that if E(K) [p] ^0, then already E(K nr ) [p] ^ 
with K UI the maximal unramified subficld of K. For this, recall that the restriction 
of the p-torsion Galois representation of E to a decomposition group at p has the 
form 

' £X * 

x- 1 
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with e the cyclotomic character, x an unramified character and * either trivial or 
wildly ramified. K is not wildly ramified (since d < p) and does not contain so 
that the only way that E(K) [p] can be non-zero is if * is trivial and x factors through 
Gal(-KyQp). Since x 1S unramified, it must thus factor through Gal(i^ ur /Q p ) as 
well, as desired. □ 

Recall that Sa b denotes the set of elliptic curves E a b with a, b <E Z and \a\ < A, 
\b\<B. 

Proposition 4.5. Fix A,B > 0. Then 
— L- J2 nUx)=0(d>) + d-ott± + ±yV 2 lo S x+^ X yHo g x 

Proof. By Lemma 14.41 we have 

* Sa > b # Sa > b e£:, b 

It thus suffices to consider the latter sum. 

Let Kp denote the unramified extension of Q p of degree d and let k e {x) denote 
the number of p < x such that E{K d )[p] ^ 0. By Lemma 3.1, E{K d )[p] ^ can be 
detected by looking at E over Z/p 2 . Since there are 

elliptic curves in Sa,b reducing to any fixed elliptic curve over Z/p 2 , applying 
Lemma 13.11 and reversing the order of summation we find that 

— ^— J2 * d E (x) = —^Y,#{ EeS ^B;E(Ki)lp]^o} 



p<x 



since 



#S A , B =4AB{l + o(l)). 
Applying the estimates of Lemma l4.2l and summing over d now yields the result. □ 



Corollary 4.6. IfA,B^> x 7 / A+e , th 



en 



— L_ J2 7T d E (x)«d 2 
* SA ' B E^Sa.b 



as x — > oo . 
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5. Deformation theory 

Fix an elliptic curve E over Q without complex multiplication. Let S denote 
the set of primes at which E has bad reduction. For a prime p consider the Galois 
representation 

p E , P : Gal(Q Su{p} /Q) -> GL 2 (F P ) 

giving the Galois action on the p-torsion points E[p]. A deformation of pE,p to a 
local ring R with residue field F p is a strict equivalence class of Galois representa- 
tions 

Gal(Q SuM /Q) GL 2 (i?) 
which yield pE,p on composition with the reduction map 

GL 2 (i?) -» GL 2 (F p ); 

here two Galois representations are considered to be strictly equivalent if they are 
conjugate by a matrix which reduces to the identity in GL 2 (F p ). 

When pE,p is absolutely irreducible (which is true for sufficiently large p) it is 
known [9, Section 1.2] that there exists a universal deformation 

Pe™ : Gal(Q SuM /Q) - GL 2 (R»™) 

in the category of inverse limits of artinian local rings with residue field F p ; the 
ring R E n p v is called the universal deformation ring of pE,p- Thus any deformation 
of pE,p to such a ring R is obtained from p unlv by composition with a unique map 

Duniv r> 
n E,p ^ sx - 

It is of fundamental interest to understand the structure of i?™ p v - Let ad pE, P 
denote the adjoint representation of pE,p and set 

di := dim Fp H l (Q SU { p y/Q, a,Ap E ,p)- 
We have the following result of Mazur [9l Section 1.6 and Section 1.10]. 

Proposition 5.1. With notation as above, R E m p v is a quotient of a power series 
ring in d\ variables over Z p by an ideal generated by at most d 2 elements. Further- 
more, one has d\ — c? 2 = 3. In particular, if <i 2 = (in which case one says that 
the deformation theory of pE,p is unobstructed), then i?™ p " is (non-canonically) 
isomorphic to a power series ring in three variables over Z p . 

In [10j . Mazur further asks if the deformation theory of pE,p is unobstructed for 
all but finitely many primes p. (We remark that the analogous question for modular 
forms of weight at least 3 was answered affirmatively in [13] . ) Using Poitou-Tate 
duality and work of Flach [1] on symmetric square Selmer groups, he proved the 
following result. 

Proposition 5.2. Let p be a prime of good reduction for E such that pE.p is 
absolutely irreducible. If the deformation theory of pE.p is obstructed, then one of 
the following holds: 

(1) P < 3; 

(2) peS; 

(3) I = 1 (mod p) for some i <E S; 

(4) The Galois representation pE,p is not surjective; 

(5) p divides the (appropriately normalized) special value L(Sym 2 E, 2)/f2 of 
the symmetric square L-function of E; 
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(6) H°(Q e , Sym 2 E[p}) ^ for some £eSU{p}. 

Furthermore each of these conditions holds for all but finitely many primes p, with 
the possible exception of the vanishing of i/°(Q p , Sym 2 E[p]) in (6). 

To answer Mazur's question it thus suffices to show that H°(Q p , Sym 2 E[p\) = 
for all but finitely many p. The next proposition gives some reformulations of this 
condition. 

Proposition 5.3. Let p be an odd prime of good reduction for E. Then the fol- 
lowing are equivalent: 

(1) H°(Q p ,Sym 2 E[p})^0; 

(2) a p (E) = ±1 and the restriction of PE.p to a decomposition group at p is 
semi-simple; 

(3) a p (E) = ±1 and $e possesses a companion form modulo p. 
If P > 7, then these conditions are further equivalent to: 

(4) E(K)[p] ^ with K some quadratic extension o/Q p . 

Proof. The equivalence of (1) and (2) is [lOl Lemma of p. 172]. The equivalence 
of (2) and (3) is the main result of [5]. Finally, for the equivalence of (1) and (4) 
we modify the argument of p] Lemma 2.3 (i)]. It is clear that if x £ E(K)[p] is 
non-trivial, then x ® x gives a non-zero element of H°(Q P , Sym 2 E[p\). For the 
converse, suppose that t £ H° (Q p , Sym 2 E[p}) is non-trivial. Let e denote the 
mod p cyclotomic character. Since p > 7 we may choose a S Gal(Q p /Q p ) such 
that e(a) 4 ^ 1. Let A, /i e F p be the eigenvalues of a acting on E[p\. Then the 
eigenvalues of a acting on Sym 2 E[p] are A 2 , A/i = e(cr), and /i 2 . Since t is fixed by 
a, one of these must equal 1; as e{a) ^ 1 we may assume without loss of generality 
that A 2 = 1. 

Now consider a 2 , which has E[p] eigenvalues A 2 — 1 and e(cr) 2 . These eigenvalues 
are distinct, so we may choose a basis x, y of E[p] with er 2 -eigenvalues 1 and e(c) 2 , 
respectively. Since £(c) 4 7^ 1, one computes easily that the <r 2 -invariant subspace 
of Sym 2 E[p] is spanned by x <g> x. Since t must lie in this subspace, it follows that 
x <8> x is fixed by all of Gal(Q p /Q p ). Thus Gal(Q p /Q p ) acts on x by a quadratic 
character, so that x is defined over a quadratic extension of Q p . □ 

Combined with Proposition 15.31 Theorem 11.21 immediately yields Theorem 11.31 
Furthermore, it shows that the exceptional case in Proposition l5.2l occurs on average 
finitely often. Unfortunately, already the condition (2) of Proposition 15.21 fails 
to satisfy such a strong bound, so that we can not state such a result for the 
deformation theory of E. 

Nevertheless, for certain elliptic curves one has a p {E) — ±1 for finitely many 
p, so that one can verify Coniecture ll.il for d = 2 for these curves and thus settle 
these questions. More precisely, we have the following. (For an alternate proof of 
the 15-isogeny case, see [31 Theorem 1.4].) 

Proposition 5.4. Let E be an elliptic curve over Q without complex multiplication. 
Assume that E admits either a rational 2-isogeny or a rational 15-isogeny. Then 
Conjecture \1.1\ holds for E with d = 2. Ln particular, the deformation theory of 
PE.p is unobstructed for all but finitely many primes p. 
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Proof. We in fact show that E does not have a point of order p over F p 2 for all but 
finitely many p. Since for p > 7 this occurs if and only if a p {E) = ±1, it suffices to 
show that occurs for only finitely many primes p. 

If E possesses a rational 2-isogeny, then it has rational 2-torsion. Thus in par- 
ticular _E(F P )[2] ^ for all but finitely many primes p. Fix such a p > 2. Then 

a p {E)=p+l-#E{F p )=0 (mod 2), 

so that certainly a p (E) ^ ±1, as desired. 

Now let E be an elliptic curve admitting a 15-isogeny. The modular curve Ao(15) 
has four non-cuspidal rational points; as the four elliptic curves in the isogeny class 
50 A of [2] admit rational 15-isogenies and are distinct over Q, it follows that every 
elliptic curve admitting a rational 15-isogeny is isogenous to a twist of the curve 
50A1. Since isogeny does not change Fourier coefficients and twisting changes them 
only up to sign (and introducing some zeroes), it suffices to prove the proposition 
for the elliptic curve 50A1. 

Let E denote the elliptic curve 50A1; it has Weierstrass equation 

y + xy + y = x ~ x — 2. 
Then E has the rational 3-torsion points 

{(2,1), (2, -4)} €£[3] 
and admits a rational 5-isogeny. Thus 

? E - 3 - ( I ) pE - 5 - ( ex' 1 ) 

with e cyclotomic and \ some Dirichlet character. One finds that E has a 5-torsion 
point 

p = (-c| - c 5 2 - w! - 2Cs - 1) 

with £5 a primitive 5 th root of unity. Using this one explicitly computes x as 
a Dirichlet character of conductor 5; combined with the knowledge of pe,3, we 
conclude that 

~ ( Xi * \ 
with XI7X2 Dirichlet characters of conductor 15 given by 



n 


1 


2 


4 


7 


8 


11 


13 


14 


Xi(n) 


1 


13 


4 


13 


7 


1 


7 


4 


X2(n) 


1 


14 


1 


4 


14 


11 


4 


11 



In particular, we have 

a P (E) ee xiip) + Xi(p) (mod 15) 

for all p > 7. Thus 

a p (E) G {0,2,5,6,11,12} 
modulo 15, so that a p (E) ^ ±1 for all p > 7, as desired. □ 
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